Changing Clinic Image System SQL Injection Vulnerability

A SQL injection vulnerability has been identified in the Clinic Image System developed by Changing, specifically in versions through 2.4.23.2131, excluding 1.5.x.x and 2.0.x.x. This vulnerability allows unauthenticated remote attackers to inject arbitrary SQL commands, potentially leading to unauthorized access to database contents.

Impact

Exploitation of this vulnerability could allow attackers to read sensitive data from the database, which may include personal health information or other confidential records.

Remediation

Users are advised to update to version 2.4.23.2131 or later.